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AMENDMENTS TO THE CLAIMS 

The following listing of claims replaces all prior versions of the claims and all prior 
listings of the claims in the present application. 

1 . (currently amended) A Montgomery modular multiplier of a public-key cryptographic 
system that [[which]] calculates a value congruent to "ABR 1 " (mod M) used in the 
cryptographic system , where A and B are input n-bit numbers, R' 1 is an inverse number of R 
modular-multiplied for "mod M", and M is a modulus, the Montgomery modular multiplier 
comprising: 

an A-register storing a bit value ai (where T denotes [[is]] an integer in the range of 
ranging from 0 to n-1) of the number A, which is smaller than the modulus M; 

a B-register storing a bit value bj of the number B, which is smaller than the modulus M; 

an M-register storing a bit value mi of the modulus M, which is an odd number; 

a b|A calculation logic circuit multiplying the number A by the bit value bi to obtain bjA; 

a qj calculation logic circuit solving a Boolean logic equation "s 0 XOR c 0 XOR (bj AND 
ao)'\ where So is the least significant bit (LSB) of a sum S, Co is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value q\\ 

a qjM calculation logic circuit multiplying the modulus M by the bit value qj to obtain 

qiM; 

a 4-2 compressor [[first]] performing V additions on the carry C, the sum S, the tyA, and 
the qjM to obtain interim values and summing the interim values to obtain a result using a [[by]] 
carry propagation adder in response to a carry propagation adder signal; 

an S-register updating a bit value S\ of the sum S and storing the updated bit value; and 
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a C-register updating a bit value c\ of the carry C and storing the updated bit value. 

2. (currently amended) The Montgomery modular multiplier of claim 1, wherein the 4-2 
compressor comprises: 

a first full adder unit[[,]] summing a bit value biai of the tyA, a bit value Shi of the sum S, 
and the bit value Ci of the carry C to obtain a carry cAj and a sum sAj; 

a multiplexer (MUX) unit selectively outputting either a bit value q^m, [[qjMj]] of the 
qiM, a [[the]] carry cAj_i, and the sum sAj or the bit value Sj+i of the sum S, the bit value c\ of the 
carry C, and a [[the]] bit value Ch of the carry C, in response to the carry propagation adder 
signal; mid 

a second full adder unit performing *n* additions on the bit value qjnij of qiM, the 
carry cAj_i, and the sum sAj to calculate interim bit values Si of the sum S and Ci of [[S and]] the 
carry C, when the carry propagation adder signal is in an inactive state, and [[then]] summing the 
bit value Sj+i of the sum S, the bit value Ci of the carry C, and the bit value cm of the carry C to 
obtain final results of the sum S and the carry C, when the carry propagation adder signal is in an 
active state. 

3. (currently amended) The Montgomery modular multiplier of claim 2 [[1]], wherein a 
[[the]] carry save adder structure is a 4-input 2-output structure, in which the first and second full 
adder units operate when the carry propagation adder signal is in the [[an]] inactive state. 
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4. (currently amended) The Montgomery modular multiplier of claim 2 [[1]], wherein a 
[[the]] carry propagation adder structure is a 3-input 2-output structure, in which only the second 
full adder unit operates when the carry propagation adder signal is in the [[an]] active state. 

5. (original) The Montgomery modular multiplier of claim 2, wherein the LSB of the 
carry cAh and the LSB of the carry cm are in a first logic state. 

6. (currently amended) The Montgomery modular multiplier of claim 2, wherein the 
most significant bit Most Significant Bit (MSB) of the sum S [[si+i]] is equal to the bit value 
[[carry]] cA n _! at a clock pulse before the carry propagation adder signal is activated. 

7. (currently amended) A method of performing a Montgomery modular multiplication 
in a Montgomery modular multiplier of a public-key cryptographic system , in which the 
Montgomery modular multiplier includes registers for storing bit values aj, bj, nij, Cj, and Sj 
(where T denotes an integer in the range of 0 to [[n*l]] nJJ of a word A, a word B, a 
modulus M, a carry C, and a sum S, respectively, and calculates a value congruent to "ABR" 1 " 
(mod M), where A and B are input n-bit numbers, R" 1 is an inverse number of R modular- 
multiplied for "mod M", and M is a modulus, the method comprising: 

receiving the number A, the number B, and the modulus M; 
multiplying the number A by a bit value bi to obtain each bit of bjA; 
solving a Boolean logic equation "s 0 XOR c 0 XOR (bi AND ao)'\ where s 0 is the least 
significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bi is the bit value of the number B, 
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and ao is the LSB of the number A, to obtain a bit value qi (wh e r e i denot e s on int e g e r in th e 
rang e of 0 to n*l) ; 

multiplying the number modulus M by the bit value qi to obtain each bit of qiM; 

performing V additions on the carry C, the sum S, the fyA, and the qM to obtain interim 
values for each bit of the sum S and the carry C in a carry save adder structure, in response to a 
carry propagation adder signal; and 

summing the interim values to obtain the final results of the sum S and the carry C in a 
carry propagation adder structure, in response to the carry propagation adder signal. 

8. (original) The method of claim 7, wherein the number A is smaller than the 
modulus M. 

9. (original) The method of claim 7, wherein the number B is smaller than the 
modulus M. 

10. (original) The method of claim 7, wherein the modulus M is an odd number. 

1 1 . (currently amended) The method of claim 7, wherein the interim values and final 
results valu e s of the sum S and the interim values and final results valu e s of the carry C are 
calculated by: 

summing a bit value b^ [[bjAj]] of the tyA, a bit value s\+\ of the sum S, and a [[the]] bit 
value Ci of the carry C to obtain a carry cAi and a sum sAj; 
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selectively outputting either a bit value [[qiMi]] of the qiM, a carry cAm, and the 
sum sAj or the bit value Sj+i of the sum S, the bit value Ci of the carry C, and a bit value Cj_i of the 
carry C, in response to the carry propagation adder signal; 

performing *n* additions on the bit value qjmj of the qjM, the carry cAj_i, and the sum sAj 
to calculate interim bit values Sj of the sum S and Ci of [[S and]] the carry C, when the carry 
propagation adder signal is in an inactive state; and 

summing the bit value Sj+i of the sum S, the bit value Cj of the carry C, and the bit 
value cm of the carry C to obtain final results of the sum S and the carry C, when the carry 
propagation adder signal is in an active state. 

12. (currently amended) The method of claim 7, wherein the carry save adder structure 
is a 4-input 2-output structure, in which the interim values of the sum S and the carry C are 
obtained from the biA and the qiM when the carry propagation adder signal is in an inactive state. 

13. (currently amended) The method of claim 7, wherein the carry propagation adder 
structure is a 3-input 2-output structure, in which the final results valu e s of the sum S and the 
carry C are obtained from the interim values of the sum S and the carry C when the carry 
propagation adder signal is in an active state. 

14. (currently amended) The method of claim 11, wherein the LSB of the carry cA\.\ and 
the LSB of the carry cm are in a first logic state. 
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15. (currently amended) The method of claim 11, wherein the most significant bit 
(MSB) [[value]] of the sum S [[s i+ i]] is equal to the bit value cA n _i at a clock pulse before the 
carry propagation adder signal is activated. 

16. (currently amended) A method of performing radix 2 N Montgomery modular 
multiplication in a public-key cryptographic system , where N is greater than or equal to 1 
[[N>=1]], the method comprising[[;]]i 

receiving a multiplicand [[(A)]], a modulus [[(M)]], and a multiplier [[(B)]]; 

performing carry save addition using first and second full adder units on at least four 
inputs related to the multiplicand, modulus, and multiplier to generate a result in redundant 
representation; and 

performing carry propagation addition using the second full adder unit to generate a 
result in normal representation in response to a carry propagation adder signal. 

17. (currently amended) A Montgomery modular multiplier of a public-key 
cryptographic system, comprising: 

a multiplicand [[(A)]] register, storing a bit value ai of a [[the]] number A; 
a modulus [[(M)]] register, storing a bit value mj of th e numb e r a modulus M; 
a multiplier [[(B)]] register, storing a bit value bj of a [[the]] number B; 
a bjA calculation logic circuit multiplying the number A by a bit value bi to obtain each 
bit of bjA; 

a qi calculation logic circuit solving a Boolean logic equation "s 0 XOR c 0 XOR (b\ AND 
ao)'\ where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bi is the bit 
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value of the number B, and ao is the LSB of the number A, to obtain a bit value q { (where T 
denotes an integer in the range of 0 to [[n*l]] n-1) ; 

a q]M calculation logic circuit multiplying the modulus M by the bit value qi to obtain 
each bit of qjM; and 

a t-s compressor, wherein t>3[[,]] and s>l, performing V additions on the carry C, the 
sum S, the bjA, and the qjM to obtain interim values for each bit of the sum S and the carry C in 
a carry save adder structure and summing the interim values to obtain final results of the sum S 
and the carry C in a carry propagation adder structure, in response to a carry propagation adder 
signal. 

18. (new) A system embodying a Montgomery modular multiplier, the system 
comprising: 

an A-register storing a bit value aj (where T denotes an integer in the range of 0 to n-1) 
of an n-bit number A; 

a B-register storing a bit value bi of an n-bit number B; 
an M-register storing a bit value mi of an n-bit modulus M; 

a bjA calculation logic circuit multiplying the number A by the bit value b; to obtain bjA; 

a qi calculation logic circuit solving a Boolean logic equation "so XOR c 0 XOR (bi AND 
ao)", where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value qi; 

a qiM calculation logic circuit multiplying the modulus M by the bit value qi to obtain 

qiM; 
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a compressor performing 'n' additions on the carry C, the sum S, the bjA, and the qjM to 
obtain interim values and summing the interim values to obtain a result using a carry propagation 
adder in response to a carry propagation adder signal; 

an S-register updating a bit value Si of the sum S and storing the updated bit value; and 

a C-register updating a bit value Ci of the carry C and storing the updated bit value; 

wherein given that the number A is smaller than the modulus M, the number B is smaller 
than the modulus M, the modulus M is odd, and R" 1 is an inverse number of R modular- 
multiplied for "mod M", the system calculates a value congruent to "ABR 1 " (mod M). 

19. (new) The system of claim 18, wherein the system comprises a public-key 
cryptographic system. 

20. (new) The system of claim 18, wherein the system is a public-key cryptographic 

system. 

21. (new) The system of claim 18, wherein the value congruent to "ABR" 1 " (mod M) is 
used in a public-key cryptographic system. 

22. (new) The system of claim 18, wherein the value congruent to "ABR" 1 " (mod M) is 
used in the system as a cryptographic key. 
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